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(54) Centralized certificate management system for two-way interactive communication devices 
in data networks 


(57) The present invention discloses a method for 
managing centralized certificates in a proxy server de- 
vice (114) for a plurality of thin client devices (302, 304, 
306) coupled thereto through a data network (102). A 
user account database, accessible by the proxy server, 
comprises a plurality of user accounts with each of the 
thin client devices being associated with one or more of 
the user accounts. Each of the user accounts comprises 
a device ID (316), a list of public and private keys (326) 
assigned to the user account, and a list of certificates 
(320) assigned to the user account. A certificate man- 


agement module reserves a fixed number of free certif- 
icates signed by a Certificate Authority and their respec- 
tive private keys in a certificate database (328) and fre- 
quently updates the free certificate according to a cer- 
tificate updating message. Whenever a user account is 
created for a thin client device, the certificate manage- 
ment module fetches one or more free certificates from 
the certificate database and associates the fetched cer- 
tificate^) to the created account and at the same time 
creates new free certificates with the Certificate Author- 
ity to fill in the certificate database. 
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